VMware Carbon Black Endpoint Reviews

Name: VMware Carbon Black Endpoint
Brand: VMware
Rating: 4 (63 reviews)

Vendor: VMware

3.9 out of 5

63 reviews
88% willing to recommend

3,413 followers

Post review

What is VMware Carbon Black Endpoint?

VMware Carbon Black Endpoint provides comprehensive endpoint security against ransomware, spyware, malware, and viruses, catering to both cloud and on-premise environments.

Get the VMware Carbon Black Endpoint Buyer's Guide and find out what your peers are saying about VMware Carbon Black Endpoint, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

VMware Carbon Black Endpoint is the #1 ranked solution in top Security Incident Response solutions, #4 ranked solution in top Ransomware Protection solutions, #15 ranked solution in EDR tools, and #18 ranked solution in endpoint security software. PeerSpot users give VMware Carbon Black Endpoint an average rating of 7.8 out of 10. VMware Carbon Black Endpoint is most commonly compared to CrowdStrike Falcon: VMware Carbon Black Endpoint vs CrowdStrike Falcon. VMware Carbon Black Endpoint is popular among the large enterprise segment, accounting for 55% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

VMware Carbon Black Endpoint

October 2024

Get the report

Helped 814,763 peers since 2012

Featured reviews

Durai Singh

Business Owner at Ararat Technologies

Customers want solutions that provide endpoint detection and response. The traditional antivirus solutions and the market trend are changing. Customers are asking for the latest technologies. Carbon Black has very good market strategies. We do the marketing activities and promote the product to the…

Read full review

Matthew Weisler

Sole Proprietor at Core-Infosec

The solution is cloud based which makes it easy to use for remote devices or work-at-home situations. The solution supports full trust or signature-based approvals. You can get very granular and band out policies or applications without having to do hash values. You can band through the entire environment by execution of the name or desk IDXE. This can be achieved on the policy side because of the signature, IOC, or naming convention itself. This is very effective for pushing more blockage or removing threats across the board. The solution has a very nice API on the back end for remoting into a system and executing scripts or utilizing self automation. This is useful for monitoring several different companies in a workspace or workbook-type format. For example, I report and send out mass emails from a clickable button in an Excel workbook. The APIs all exist for each client. I push out automatic endpoint monitoring and reports every single day at a particular time, with a simple clickable button that serves as a scheduled task for fifty clients.

Read full review

Imad Taha

Group CIO at a construction company with 10,001+ employees

As far as I know, Carbon Defense has nothing that can be installed on mobile devices. It lacks a defense solution for mobile devices, especially mobile tablets. I would like to see support for mobile devices and the pricing should be less than the pricing for a normal workstation. Also, there is not much education for customers about Defense versus its other products. They promote Defense as enough, but then they say if you need more protection you can go for CB Response. I don't know whether it's a technology issue or a marketing issue, but they should teach the customer more. They tell you you are secure with Carbon Defense but then they recommend Carbon Protect. There is not a lot of education on this. I don't want to have an incident in the future and their answer will be, "Sorry, you did not buy Protect." Security is a continuous process. I can accept that it has more features, but don't tell me, "You are not protected because you did not buy the more expensive product." In addition, these other products should be add-ons, not separate products. And the cost for them should be much less for adding on because you are already a customer. Finally, we receive a lot of high alerts. There is no priority system, from one to 10, where 10 is very dangerous and one is something easy. There is no way for us to tell why this alert is similar to that one.

Read full review

VMware Carbon Black Endpoint mindshare

Product category:

As of November 2024, the mindshare of VMware Carbon Black Endpoint in the Endpoint Protection Platform (EPP) category stands at 2.0%, down from 2.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Key learnings from peers

Last updated Aug 30, 2024

Valuable Features

VMware Carbon Black Endpoint excels in offline networking, centralized cloud control, dynamic grouping, threat analysis, and intelligent learning. It offers simplified policy management, historical data features, robust protection, easy setup, live response, sandboxing, customizable settings, effective endpoint detection, and scalability. The platform integrates well with other systems, provides continuous monitoring and powerful APIs, and supports remote work. It is highly stable, provides comprehensive security, and offers extensive online documentation.

"It significantly speeds up incident response times by alerting analysts immediately upon detecting potential issues."
"The portal is easy to use and manage."
"VMware Carbon Black Endpoint is a highly stable solution."

Room for Improvement

VMware Carbon Black Endpoint needs to enhance endpoint performance, streamline deployment, and improve educational resources for users. It should offer better mobile support, refine the alert system, and increase compatibility with other products. Enhancements in user interface explanations, report generation, and cloud console responsiveness are necessary. They must also address slow query processing, improve Mac support, and integrate with existing firewalls. Pricing could be made more competitive.

"The product cannot perform an on-demand scan. They could add this particular feature."
"Certain settings have limitations. For example, I cannot manually block some malware activities."
"Performing a malware scan usually takes a lot of time, more than 24 hours."

ROI

Users found significant ROI with VMware Carbon Black Endpoint, often noticing improvements within six months. Many companies avoided costly malware attacks after implementation. ROI is sometimes difficult to quantify precisely in antivirus contexts, but users highlighted reduced security incidents and stated a 10% cost saving against other vendors.

Pricing

VMware Carbon Black Endpoint's pricing is generally seen as high, with annual subscription models common. Users report inflexible licensing requiring a minimum of 100 licenses, even for smaller offices needing fewer. While some find the costs competitive, others consider them higher than similar solutions. License costs range from $15 per node to $28 per employee, with typical payments between $5,000 to $7,000 for monitoring agents, and expressed dissatisfaction with the lack of flexibility for existing customers.

"The platform is expensive."
"The product is quite reasonable."
"The product is expensive. There are some additional costs apart from the standard licensing charges attached to the solution."

Popular Use Cases

VMware Carbon Black Endpoint is used by organizations for endpoint protection, detecting malware, blocking ransomware, threat hunting, securing servers, and monitoring endpoint activity. It helps stop spyware, viruses, and provides EDR capabilities. Companies use it for advanced threat defense, integrating with existing security measures, and ensuring compliance. It is deployed on both cloud and on-premises environments, providing robust security by intelligent learning and machine learning, widely utilized by MSPs and distributors.

Service and Support

Customers often find VMware Carbon Black Endpoint's support responsive and knowledgeable, with good support available locally and globally. Some note slow response times and the need for tier escalation. Several highlight good support but encounter delays, particularly for documentation and portal communication. There's mixed feedback about local support, with some satisfied and others noting slow responses. Many users have not needed to contact support, trusting self-help resources and documentation.

Deployment

Many users find VMware Carbon Black Endpoint's initial setup straightforward, although some mention complexity due to extensive configuration options. Deployment time varies from a few minutes for a single endpoint to several months for larger environments. Common challenges include the need for thorough testing and policy tuning. Adequate training and knowledge are essential for smooth implementation, and the cloud version is generally perceived as easier to set up than the on-premises version.

Scalability

VMware Carbon Black Endpoint is highly scalable, accommodating various company sizes ranging from small to enterprise levels. Users report ease of scalability with cloud deployment, successful large-scale implementations with thousands of endpoints, and no significant issues. Trained staff can manage numerous endpoints efficiently. While some experience limitations, particularly in regulated environments or with specific OS support, users generally find it effective and adaptable. Ratings frequently range from eight to ten out of ten for scalability.

Stability

Users report VMware Carbon Black Endpoint as generally stable with minimal resource use. Some note occasional issues with sensors and slow performance in specific scenarios. Stability is rated highly by many, with no significant bugs or crashes observed. Regular updates and proper configuration help improve performance. However, some users mention fluctuations in stability between versions and instances of the software interrupting installations. It is commonly used daily without major problems and is found to be reliable.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our VMware Carbon Black Endpoint Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

10%

Government

Manufacturing Company

Energy/Utilities Company

Retailer

Healthcare Company

Educational Organization

University

Real Estate/Law Firm

Insurance Company

Construction Company

Comms Service Provider

Legal Firm

Non Profit

Hospitality Company

Media Company

Wholesaler/Distributor

Transportation Company

Performing Arts

Outsourcing Company

Recreational Facilities/Services Company

Logistics Company

Pharma/Biotech Company

Consumer Goods Company

Compare VMware Carbon Black Endpoint with alternative products

Learn more about VMware Carbon Black Endpoint

VMware Carbon Black Endpoint facilitates endpoint detection and response, threat hunting, application control, antivirus support, and protection for virtual and physical machines. Features include intelligent learning, whitelisting, and integration with other security tools, making it suitable for distributors, MSPs, and enterprises seeking advanced threat defense and real-time monitoring. With its capability to detect and stop malicious executables, it supports both offline and online environments and offers tools like command shell access for deeper investigation.

What are the key features of VMware Carbon Black Endpoint?

Intelligent learning: Improves detection capabilities over time.
Whitelisting: Allows only approved applications to run.
Integration with other security tools: Enhances overall security posture.
Centralized cloud control: Manages endpoints from a single interface.
Command shell access: Offers deeper investigation capabilities.
Dynamic grouping: Facilitates organized endpoint management.
Simplified policy management: Streamlines security policy implementation.
API for system remoting: Allows remote system access and management.
Twenty-four-seven support: Provides continuous assistance and response.

What are the benefits of VMware Carbon Black Endpoint?

Real-time monitoring: Offers constant vigilance against threats.
Threat hunting: Identifies and mitigates threats proactively.
Historical data analysis: Assists in understanding past incidents and patterns.
Improved endpoint protection: Enhances overall endpoint security.
Enhanced threat detection: Reduces exposure to advanced threats.

VMware Carbon Black Endpoint is implemented across various industries including technology, healthcare, and finance. Organizations utilize it in cloud and hybrid environments, enhancing their security frameworks with real-time monitoring, intelligent learning, and robust threat detection capabilities tailored to their specific industry needs.

VMware Carbon Black Endpoint was previously known as Carbon Black CB Defense, Bit9, Confer.